run identity: /home/ubuntu/.local/state/g1vm/runs/20261025T032613Z-check-devices-kvm/disk.qcow2
  over /nix/store/axmxsd8j9hj2sq5m0d7idjbhjnazisr1-g1-virt-overlay-5.15.148-tegra/g1-virt-overlay.qcow2
  allow: /nix/store/p10gvabbjq0mvjcpl5yjk99qg4bhdwrq-g1vm-0.2.0/libexec/g1vm/allow/boot.allow /nix/store/p10gvabbjq0mvjcpl5yjk99qg4bhdwrq-g1vm-0.2.0/libexec/g1vm/allow/devices.allow /nix/store/p10gvabbjq0mvjcpl5yjk99qg4bhdwrq-g1vm-0.2.0/libexec/g1vm/allow/site.allow /nix/store/p10gvabbjq0mvjcpl5yjk99qg4bhdwrq-g1vm-0.2.0/libexec/g1vm/allow/dds.allow
  115 changed, 0 undeclared (11 s in the g1-fs helper)

boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-Ys1ire
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-Ys1ire/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-QIbB60
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-QIbB60/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-k6JuXv
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-k6JuXv/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-ISoiLX
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-ISoiLX/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-9DlcOK
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-9DlcOK/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-eHa0JW
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-eHa0JW/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-4JQr87
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-4JQr87/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-weN11s
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-weN11s/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-ChRNZW
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-ChRNZW/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-oeRcjf
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-oeRcjf/tmp
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-OxIIeh
boot.allow:14  - d 0:0 - /tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-OxIIeh/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-a1ViU3
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-ModemManager.service-a1ViU3/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-22ebiZ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-bluetooth.service-22ebiZ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-K7RXqG
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-colord.service-K7RXqG/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-07nWeZ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-fwupd.service-07nWeZ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-WXVPJj
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-haveged.service-WXVPJj/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-cYrEY3
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-power-profiles-daemon.service-cYrEY3/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-uDuFI5
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-switcheroo-control.service-uDuFI5/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-8HUCO2
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-logind.service-8HUCO2/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-Wd2MQ6
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-resolved.service-Wd2MQ6/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-Q69nlQ
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-systemd-timesyncd.service-Q69nlQ/tmp
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-4DLqCH
boot.allow:15  - d 0:0 - /var/tmp/systemd-private-073050aa1f9644b9a66b0a7c2ac38362-upower.service-4DLqCH/tmp
boot.allow:18  - f 1000:1000 - /tmp/gdm3-config-err-H18sL0
boot.allow:16  - s 0:0 - /tmp/.X11-unix/X0
boot.allow:17  - s 1000:1000 - /tmp/.ICE-unix/1747
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-ModemManager.service-vn6xOc/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-haveged.service-v0lRYp/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-power-profiles-daemon.service-533Dog/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-switcheroo-control.service-vuApbu/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-logind.service-jusFEZ/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-resolved.service-X9nxQ7/tmp
boot.allow:14  d 1777 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-timesyncd.service-4t3ZRy/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-ModemManager.service-vr1SqA/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-haveged.service-vXVIQU/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-power-profiles-daemon.service-pQWrcw/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-switcheroo-control.service-tru339/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-logind.service-D65jGJ/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-resolved.service-JSxBId/tmp
boot.allow:15  d 1777 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-timesyncd.service-NTvNCK/tmp
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-ModemManager.service-vn6xOc
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-haveged.service-v0lRYp
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-power-profiles-daemon.service-533Dog
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-switcheroo-control.service-vuApbu
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-logind.service-jusFEZ
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-resolved.service-X9nxQ7
boot.allow:14  d 700 0:0 - /tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-timesyncd.service-4t3ZRy
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-ModemManager.service-vr1SqA
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-haveged.service-vXVIQU
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-power-profiles-daemon.service-pQWrcw
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-switcheroo-control.service-tru339
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-logind.service-D65jGJ
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-resolved.service-JSxBId
boot.allow:15  d 700 0:0 - /var/tmp/systemd-private-c55342655bef49eab7294a02a67fa585-systemd-timesyncd.service-NTvNCK
devices.allow:4  d 775 1000:1000 - /tmp/g1vm
devices.allow:4  f 444 1000:1000 814fae1a1d213a32d42be6e6a02076e0139cff8332866d2b624f521cf9231453 /tmp/g1vm/probe.cpp
devices.allow:4  f 444 1000:1000 d4fa2a6255dc222bf8f790ccaf4c92668dd3d7d2362d8093c83f72048a53a750 /tmp/g1vm/cap.py
devices.allow:4  f 555 1000:1000 57968d9d17ed1e532963a1c74f929a51ade4c144350ee0825be7de85503d1430 /tmp/g1vm/tcpdump
devices.allow:4  f 555 1000:1000 a91a3fe4ae5324b9d747c78bab988bb801fa88cf514e11c4278c3f8c9854c72e /tmp/g1vm/fake-pc
boot.allow:19  f 600 0:0 1615ce2bd4cda488cddeddbd19d06f3eaaa5519a8089645b5d81a5bbd58be8ef /var/lib/systemd/random-seed
site.allow:5  f 600 0:0 4288ede95766da55b817736df9c8b43da65b696418718f35579d9e3b10781f3f /etc/NetworkManager/system-connections/site-wifi.nmconnection
boot.allow:43  f 600 0:0 9271a4b1ba781f7d6fe99e28889956fab032214fef2e80ecb916c4a98dd6039a /var/lib/snapd/state.json
boot.allow:45  f 600 1000:1000 57fee26beb41daf2a77799a1dc7d07e12bc8132efa9287f8a2abe801842a0675 /home/unitree/.config/pulse/5dbfb12414a3456d9014d88183e338b1-device-volumes.tdb
boot.allow:28  f 640 0:4 03fa5005e04e57a0cb75af91d5b95cff4cff4842e2fa2aa02dbdcf2f67e83c07 /var/log/dmesg.4.gz
boot.allow:28  f 640 0:4 047824700caa5e07f740eebcda4a0d94623d9469faa2f8ae739eff05c7b952b0 /var/log/dmesg.3.gz
boot.allow:28  f 640 0:4 46fe80650c62f5b9ff48ad145e47f66173fd57e746ff3c6d1afa52491451cc30 /var/log/dmesg.1.gz
boot.allow:27  f 640 0:4 a54f5b18702906692c4fb7344c6bdd8d1add4286ea4fce24f2a3a7eb6c5cb332 /var/log/dmesg
boot.allow:28  f 640 0:4 e094e1bb3f498ece558cfa1fc7ba9fd01347621dcf0f01150975a70ab3d2ff60 /var/log/dmesg.2.gz
boot.allow:28  f 640 0:4 f8b9a3505a9f9759a3a7591418945f35ff38b297c7cae1830ef796e552a41bd2 /var/log/dmesg.0
boot.allow:22  f 640 107:4 8fc700be6424d5b74bd7970e389c4bb86f96a70f99168b58a39fef407f3b9028 /var/log/syslog
boot.allow:23  f 640 107:4 e0c927f7acbbc7081ba4d93178eac6d0ec249f0042c4625cd197e019c90202a2 /var/log/kern.log
boot.allow:24  f 640 107:4 f2cbcf8aba19500a75099f24bc8103380ca31ae2caf670eac0401701e0f3ed2e /var/log/auth.log
devices.allow:4  f 644 0:0 08a6fb2a6fcf1c06b8f77e6be9c88e23ab84ea8669db2c031fa9218e43ed8a60 /tmp/g1vm/probe.json
boot.allow:41  f 644 0:0 0de5ffa6430c896f7a14921317e59299a6fd85eda933ddc3cc8ecafa6c42f7eb /var/lib/NetworkManager/seen-bssids
devices.allow:7  f 644 0:0 16cd6b34d54dae9bc972c5ce1c52ddecd666de5af247c72b1c7d3bd55c2d343d /etc/udev/rules.d/80-can-gripper.rules
devices.allow:4  f 644 0:0 46504d1494a17c123693efcab20bcfbc5c7f82051618c6a837e2dabe92c01b8a /tmp/g1vm/cap-2.1.3.txt
devices.allow:4  f 644 0:0 6d28d6ee7e4c9af661062f7389163e6ae7e32cf87dbb54e0332a582b9d4ba5db /tmp/g1vm/slots.txt
boot.allow:42  f 644 0:0 7694bb872f3f3d5d8977e74071b5060e264cdb4bea0f2cb57d40013d64d24c4b /var/lib/NetworkManager/internal-a13d3012-d375-395a-a87d-5e02b5e2c3fd-enp0s1.lease
boot.allow:30  f 644 0:0 7e816a7539907643c849014ccb3ac6f6e2eeff452984c53f2bab4bb3215c5efd /var/log/Xorg.0.log.old
devices.allow:4  f 644 0:0 8a837d09b47845cca8b2ca3bce64c96b40f554df75dca497651f54e4f4b558aa /tmp/g1vm/tcpdump.txt
boot.allow:40  f 644 0:0 96c6ba440ad567b53e00468c3d902a37dd6454b797eff079b6ca8a683f1377ee /var/lib/NetworkManager/timestamps
boot.allow:20  f 644 0:0 9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa /var/lib/systemd/rfkill/wlan
devices.allow:4  f 644 0:0 9e2bdd54bda882e03947e4437597f8a64630a480c318a9e45b12e11273226fdb /tmp/g1vm/tcpdump.err
devices.allow:4  f 644 0:0 ad14d28d8552f90a0cf24fae5149d4172e95b472e01bea2d6e55aa8baef8d8e8 /tmp/g1vm/cap-2.1.4.txt
boot.allow:29  f 644 0:0 b16e732d394834820e051c9c36a28aa12410ee656597463fc2552374843cea8a /var/log/Xorg.0.log
devices.allow:4  f 644 0:0 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 /tmp/g1vm/probe.err
devices.allow:4  f 644 1000:1000 16cd6b34d54dae9bc972c5ce1c52ddecd666de5af247c72b1c7d3bd55c2d343d /tmp/g1vm/80-can-gripper.rules
devices.allow:4  f 644 1000:1000 7a8b7e7ee911c521cf0c25c24382d195e79e23c32ecb39d881b932567ac036eb /tmp/g1vm/site.sh
devices.allow:4  f 644 1000:1000 8f33cfdc1fd66317cc8f7343bd6c762382bdde11138db96098b860363ca43de4 /tmp/g1vm/nic.sh
devices.allow:4  f 644 1000:1000 8f6e88575118d77535385bcd3e38a38057a110cc545f98064da08c0f7c507465 /tmp/g1vm/gripper_check.py
devices.allow:4  f 644 1000:1000 bbf072ffb5e3057287fd3458798c41f5e4a4a95cf0662687fe37c1bdb1dbe786 /tmp/g1vm/run.sh
devices.allow:4  f 644 1000:1000 d3e7d7c1e01c00c30b8884ab02e525251115552a74c086f1edc0e411f6799e4a /tmp/g1vm/devices.sh
boot.allow:25  f 664 0:43 ebd56bfde80424fb1482548ca5a039fbf5649472c0122994ade858f9cba7ac63 /var/log/wtmp
devices.allow:4  f 775 1000:1000 519ae20f993112399570a58ff698106979c606a4cb71d8e85452c69c38239239 /tmp/g1vm/pc2-probe

declared, not written in this run:
  boot.allow:26 /var/log/lastlog
  boot.allow:32 /var/lib/gdm3/.config/pulse
  boot.allow:33 /var/lib/gdm3/.config/pulse/cookie
  boot.allow:34 /var/lib/gdm3/.config/pulse/5dbfb12414a3456d9014d88183e338b1-default-sink
  boot.allow:35 /var/lib/gdm3/.config/pulse/5dbfb12414a3456d9014d88183e338b1-default-source
  boot.allow:36 /var/lib/gdm3/.config/pulse/5dbfb12414a3456d9014d88183e338b1-device-volumes.tdb
  boot.allow:37 /var/lib/gdm3/.config/pulse/5dbfb12414a3456d9014d88183e338b1-card-database.tdb
  boot.allow:38 /var/lib/gdm3/.config/pulse/5dbfb12414a3456d9014d88183e338b1-stream-volumes.tdb
  boot.allow:44 /var/cache/snapd/**
  boot.allow:47 /var/crash/_usr_sbin_nvbootctrl.*.crash
  boot.allow:48 /var/log/apport.log
  boot.allow:50 /var/spool/anacron/*
  boot.allow:51 /var/backups/dpkg.*
  boot.allow:52 /var/backups/apt.extended_states.*
  boot.allow:56 /var/cache/apt/archives/*.deb
  boot.allow:57 /var/cache/apt/*.bin
  boot.allow:58 /var/lib/apt/periodic/*
  boot.allow:59 /var/log/ubuntu-advantage.log
  devices.allow:8 f 644 0:0 07da03c72e1ae73c775ea0225bc0b4796382db77c492cd8219f6c1b24fd8a579 /etc/udev/rules.d/80-can-gripper.rules
  site.allow:3 /tmp/g1vm/**
  dds.allow:3 /tmp/g1vm/**
